10 ms·
There's a difference between those two systems. You can get normal code signing certs from multiple vendors and if one of them unfairly revokes your certificat
by donmcronald 6y ago
There's a difference between those two systems. You can get normal code signing certs from multiple vendors and if one of them unfairly revokes your certificate [1] it doesn't prevent you from getting one from another vendor. If your business is big enough you might even have more than one code signing certificate on hand.
Compare that to a developer account (Apple, Google, or Microsoft) where there's ONE vendor for the signing certificate and it comes along with a significantly more complex (developer) agreement that includes curation and (often arbitrary) requirements and ToS.
1. https://it.slashdot.org/story/19/06/02/0042209/ask-slashdot-what-to-do-when-your-certificate-authority-suddenly-revokes-your-cert https://it.slashdot.org/story/19/06/02/0042209/ask-slashdot-...